From the course: Complete Guide to Linux Security: Protecting Your Linux Server Environment

Unlock this course with a free trial

Join today to access over 24,300 courses taught by industry experts.

Logging in Linux: The journal

Logging in Linux: The journal

- Let's start the lesson with logging in Linux, and we're going to work with the journal. Now, we've already seen this a little bit, but I want to expand upon that somewhat within this mini-lab. So in this sub-lesson, we'll define logging in today's Linux systems. We'll demonstrate how to read Linux logs with journalctl, and we'll show how to back up our logs. So let's move over to our Debian client and we'll work here with our user accounts. And first, let's review with the systemctl command, and we'll do a systemctl status on ssh. Now, when we did this, we were showing that the service was active, it was enabled. We found out lots of other good information about it, but we also saw that there was a warning. Some of the journal files were not opened due to insufficient permissions. Well, in Linux, all of the logs are stored in the journal. And the journal is a binary file that you can't really access directly, but you can access it indirectly with commands like systemctl and…

Contents